A dump of internal communications, personal media and damning evidence to Telegram has exposed the leadership of the Conti and Trickbot ransomware gangs.
The massive data dump, which began surfacing on Telegram on 5th May, includes thousands of internal chat logs, negotiation records, personal videos and even photographs of gang members celebrating aboard private jets.
In an encrypted chat with The Register, the anonymous leaker known as GangExposed described himself as an "independent anonymous investigator" who operates without a formal IT background, although security analysts believe he is not telling the whole truth.
GangExposed said he hasn't "had a 'real' name in years." Instead, he employs a blend of OSINT techniques, stylometry, linguistic analysis and classic intelligence methods to track the digital footprints of criminal syndicates.
He also claims to have access to high-value darknet databases, including the leaked Russian FSB border control system, which reportedly sold for $250,000.
GangExposed says he has used these tactics to piece together the identities of Conti's elusive leadership – not for monetary gain, but out of a desire to rid society of criminals.
"I take pleasure in thinking I can rid society of at least some of them," he said. "I simply enjoy solving the most complex cases."
Despite the $10 million bounty offered by the US State Department for tips leading to key Conti figures, GangExposed claims he deliberately passed up the reward.
...
You can be forgiven if, in the political chaos of the last week, you missed the all year. Maybe in a few years. Yet Senate Bill 1611 — the so-called ag-to-urban bill — on that day with wide bipart...